Q: What systems and procedures do you have in place which allow you to notify us of any data breach?

A: We have a defined Incident Response Plan that establishes the requirements and procedures for reporting a breach of sensitive information. The policy outlines the process for breach notification based on applicable regulations and includes appropriate reporting timelines, content, and methods outlined by those regulations.

When a breach occurs, we notify affected individuals as soon as practicable. For breaches involving personal data in the UK and Europe, we notify the Information Commissioners Office without undue delay, and where feasible, not later than 72 hours after becoming aware of it. We also have a Disaster Recovery Plan that includes a Notification/Activation phase to detect and assess damage and to activate the plan.